@benji-money/connect-sdk 1.0.8 → 1.0.9

package/README.md

@@ -40,13 +40,14 @@ const sdk = new ConnectSDK({
 
   // type: BenjiConnectEventType, metadata: BenjiConnectMetadata
   onEvent: (type, metadata) => {
-    console.log("📨 Benji Connect onEvent \(type)");
+    console.log("📨 Benji Connect onEvent (type)");
   },
 });
 
 // Open the authentication flow UI
 sdk.open();
 ```
+
 Demo example [here](https://github.com/Benji-money/benji-connect-examples/tree/main/web/esm).
 
 ### UMD (Script Tag)
@@ -99,6 +100,21 @@ npm install
 npm run build
 ```
 
+### Testing locally
+
+To test the SDK in another app without publishing to npm:
+
+1. In this repo, run: `npm run local:publish`  
+   This builds and runs `npm pack`, producing a `.tgz` file (e.g. `benji-money-connect-sdk-1.0.8.tgz`).
+
+2. In your app, install the tarball:
+   ```bash
+   npm install /path/to/benji-connect-sdk/benji-money-connect-sdk-1.0.8.tgz
+   ```
+   Or add to your app’s `package.json`: `"@benji-money/connect-sdk": "file:../path/to/benji-money-connect-sdk-1.0.8.tgz"` then run `npm install`.
+
+After SDK changes, run `npm run local:publish` again and reinstall the new `.tgz` in your app (use `--force` if npm uses a cached copy).
+
 ## License
 
 License

package/dist/connect-sdk.umd.global.js

@@ -75,7 +75,7 @@ var ConnectSDK = (() => {
   // src/utils/config.ts
   var buildContext = () => ({
     namespace: "benji-connect-sdk" ? "benji-connect-sdk" : "benji-connect-sdk",
-    version: "1.0.8" ? String("1.0.8") : "0.0.0"
+    version: "1.0.9" ? String("1.0.9") : "0.0.0"
   });
   function isBenjiConnectEnvironment(environment) {
     return environment === "development" /* DEVELOPMENT */ || environment === "sandbox" /* SANDBOX */ || environment === "production" /* PRODUCTION */;

package/dist/index.cjs

@@ -113,7 +113,7 @@ function getEnvironment() {
 // src/utils/config.ts
 var buildContext = () => ({
   namespace: "benji-connect-sdk" ? "benji-connect-sdk" : "benji-connect-sdk",
-  version: "1.0.8" ? String("1.0.8") : "0.0.0"
+  version: "1.0.9" ? String("1.0.9") : "0.0.0"
 });
 function isBenjiConnectEnvironment(environment) {
   return environment === "development" /* DEVELOPMENT */ || environment === "sandbox" /* SANDBOX */ || environment === "production" /* PRODUCTION */;

package/dist/index.js

@@ -87,7 +87,7 @@ function getEnvironment() {
 // src/utils/config.ts
 var buildContext = () => ({
   namespace: "benji-connect-sdk" ? "benji-connect-sdk" : "benji-connect-sdk",
-  version: "1.0.8" ? String("1.0.8") : "0.0.0"
+  version: "1.0.9" ? String("1.0.9") : "0.0.0"
 });
 function isBenjiConnectEnvironment(environment) {
   return environment === "development" /* DEVELOPMENT */ || environment === "sandbox" /* SANDBOX */ || environment === "production" /* PRODUCTION */;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@benji-money/connect-sdk",
-  "version": "1.0.8",
+  "version": "1.0.9",
   "description": "Benji Connect SDK for authentication and verification",
   "type": "module",
   "main": "dist/index.cjs",
@@ -25,11 +25,7 @@
     "build": "tsup --dts",
     "dev": "tsup --watch",
     "prepack": "npm run build",
-    "yalc:publish": "npm run build && yalc publish",
-    "yalc:push": "npm run build && yalc push --changed",
-    "yalc:watch": "run-p watch:build watch:push",
-    "watch:build": "tsup --watch",
-    "watch:push": "yalc push --changed"
+    "local:publish": "npm run build && npm pack"
   },
   "publishConfig": {
     "access": "public"
@@ -50,12 +46,11 @@
     "@changesets/cli": "^2.29.7",
     "rimraf": "^6.1.3",
     "tsup": "^8.5.0",
-    "typescript": "^5.9.3",
-    "yalc": "^1.0.0-pre.53"
+    "typescript": "^5.9.3"
   },
-  "// 1) rimraf → glob → minimatch": "CVE-2026-26996 (ReDos): Scoped override forces minimatch ^10.2.1 for rimraf->glob only (dev). Blanket override breaks yalc/npm-packlist (minimatch v3 API vs v10 named exports). Dev-deps only; production bundle does not use minimatch.",
+  "// 1) rimraf → glob → minimatch": "CVE-2026-26996 (ReDos): Scoped override forces minimatch ^10.2.1 for rimraf->glob only (dev). Blanket override breaks npm-packlist (minimatch v3 API vs v10).",
   "// 2) tsup → rollup": "CVE-2026-27606 (GHSA-mw96-cpmx-2vgc): Arbitrary file write via path traversal. >=4.59.0 fixes. Transitive via tsup.",
-  "// 3) tsup → sucrase → glob": "CVE-2025-64756 (GHSA-5j98-mcp5-4vw2): glob CLI command injection via -c/--cmd. >=10.5.0 fixes. Scoped to sucrase only; blanket would break yalc/npm-packlist (glob 7.x).",
+  "// 3) tsup → sucrase → glob": "CVE-2025-64756 (GHSA-5j98-mcp5-4vw2): glob CLI command injection via -c/--cmd. >=10.5.0 fixes. Scoped to sucrase only; blanket would break npm-packlist (glob 7.x).",
   "overrides": {
     "rimraf": {
       "glob": {
@@ -75,10 +70,5 @@
   "homepage": "https://github.com/benji-money/benji-connect-sdk#readme",
   "benji": {
     "namespace": "benji-connect-sdk"
-  },
-  "dependencies": {
-    "@bugsnag/browser-performance": "^3.0.0",
-    "@bugsnag/js": "^8.6.0",
-    "mixpanel-browser": "^2.71.1"
   }
 }